CVE-2026-7094

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-7094
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7094.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-7094
Published
2026-04-27T06:15:13Z
Modified
2026-10-08T02:51:41Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
ShadowCloneLabs GlutamateMCPServers puppeteer_navigate index.ts server-side request forgery
Details

A vulnerability was determined in ShadowCloneLabs GlutamateMCPServers up to e2de73280b01e5d943593dd1aa2c01c5b9112f78. Affected by this issue is some unknown functionality of the file src/puppeteer/index.ts of the component puppeteer_navigate. Executing a manipulation of the argument url can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-918"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/7xxx/CVE-2026-7094.json"
}
References

Affected packages

Git / github.com/brucejqs/public_exp

Affected ranges

Type
GIT
Repo
https://github.com/brucejqs/public_exp
Events
Introduced
e2de73280b01e5d943593dd1aa2c01c5b9112f78
Last Affected
e2de73280b01e5d943593dd1aa2c01c5b9112f78

Affected versions

Other
e2de73280b01e5d943593dd1aa2c01c5b9112f78

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-7094.json"